🚀 Updates v0.12.12: Right Sidebar Image Studio & Session Asset Cataloging (#452, #453)

• Native Image Studio Workspace Panel (#452): Registered persistent right sidebar extension slot sidebarRightTabs and sidebar.right.pane.tab with identifier dsh-image-studio. Includes prompt style tag auto-completion, negative prompt exclusion chips, provider/model/aspect ratio selectors, transparent background toggle, compact recent thumbnail grid, and one-click Copy File Path / Insert into Chat actions.
• Session-Scoped Asset Cataloging & Semantic Naming (#453): Introduced organizeBySession: boolean (default: true) to organize assets into <sessionCwd>/assets/images/<sessionSlug>/. Integrated buildSemanticSlug prompt entity extractor for clean filenames (e.g. futuristic-hero-banner-cyberpunk-v1.png) with full backward compatibility in Asset Vault.

🚀 Updates v0.12.9: Full DSH Desktop Electron Compatibility (#478)

• DSH Desktop Scheme Authorization: Extended isTrustedLocalRequest, getRouteRejectionStatus, and getRouteWriteRejectionStatus to authorize the privileged dsh-app://app/ custom scheme from local loopback connections.
• Desktop Endpoint & Image Unblocking: Unblocks /dsh-image-gen/image, /dsh-image-gen/approval, /dsh-image-gen/vault, and /dsh-image-gen/config from HTTP 403 Forbidden under Electron, restoring thumbnail rendering, Interactive Approval Gate actions, and Studio Vault functionality in DSH Desktop.
• Fail-Closed Security Invariant: Untrusted non-loopback LAN origins and spoofed custom schemes (evil-scheme://, dsh-app://untrusted.host) remain strictly rejected with HTTP 403 Forbidden.

🚀 Updates v0.12.8: Interactive Generation Approval Gate (#450)

• Interactive Approval Gate: Added interactive confirmation gate before billable image generation calls. Configurable via requireApproval: boolean (default false) and approvalTimeoutSec: number (default 120, range 5-600) under Settings > Safety.
• FalApprovalCard Toolview Card: Renders interactive chat card with prompt, provider, model, dimensions, and estimated USD cost, offering [🚀 Confirm Generation] and [✏️ Modify / Cancel] actions.
• Fail-Safe Rollback & Coordination Endpoint: Zero spend leakage on timeout or user cancellation; coordinated via protected /dsh-image-gen/approval endpoint. Supports approved: true parameter bypass for explicit confirmed runs.

🚀 Updates v0.10.8: Lossless JSON Unification, Dual-Output & Strict Validation (#199)

• Lossless JSON & Dual-Output Unification: upscale_image, remove_background, blend_images, and vectorize_image now consistently return toLosslessJson and formatted markdown summary for text-only LLMs.
• Strict Input Image Validation: extract_design_tokens, image_to_css_gradient, and check_image_contrast explicitly validate source image readability instead of silent fallback.
• Unit Testing Suite: Added test/tool-consistency.test.mjs covering tokenization, gradient generator, and PWA suite.

📦 @goodandready/dsh-image-gen

Comprehensive Visual Generation & Image Processing Suite for DeepSeek Harness

🇬🇧 English • 🇷🇺 Русский • 🇨🇳 中文说明

🚀 Updates v0.10.26: Architecture Decomposition & Repository Sanitization (#235, #238, #239)

• Architecture & Modular Decomposition (#239): All server modules in lib/ now strictly meet the <= 600 line threshold: extracted lib/tools/generation-pack.js (74 lines, reduces lib/tools/generation.js to 547 lines), lib/history.js (93 lines), and lib/attachment-helper.js (82 lines, reduces lib/index.js to 557 lines). Client codebase modularized across 15 sub-modules in src/client/* (all <= 337 lines).
• Repository Sanitization (#235): Internal agent workflow files (AGENTS.md, index.md) fully untracked from Git and excluded via .gitignore and .gitattributes.
• Theme Parity Completed (#238): Full verification and closure of zero-standalone-color rule across all Web UI surfaces with native --dsw-alias-* variables and color-mix(...) state tints.
• Package Integrity: Added canonical README.ru.md and README.zh.md to npm package files allowlist.

🚀 Updates v0.10.25: Theme Color Parity, Responsive Mockups, Patterns & Spritesheets (#173, #177, #178, #238)

• 100% Theme Color Parity (#238): Completely replaced all hardcoded rgba(...) and hex color literals in the Web UI (src/client/10-css.js, src/client/80-gallery.js) with native DSH theme variables (--dsw-alias-*) and dynamic color-mix(...). Badges, alerts, and modal overlays automatically adapt to light and dark themes with zero hardcoded values.
• Responsive Multi-Device Mockup Generator (generate_responsive_mockups, #173): Single product prompt generates coherent Mobile (9:16), Tablet (3:4), and Desktop (16:9) viewports in parallel via asyncPool concurrency limit (3). Interactive toolview with tabbed preview navigation.
• Seamless Pattern Generator (generate_seamless_pattern, #178): Automated tileable background texture generation with periodic boundary condition checks and CSS tiling preview.
• 2D Spritesheet Generator (generate_spritesheet, #177): Produces horizontal animation strips with CSS keyframe generator and multi-frame SVG previews for 2D game dev and web UI animations.
• Client Modular Source Build (#244): Decomposed monolithic lib/client.js into 15 structured fragments under src/client/* with automated build runner scripts/build-client.mjs. Preflight check FAIL=0, 179/179 automated tests passing.

🚀 Updates v0.10.24: Quality Block — Publication Boundary, Settings Status, Theme Colors & Module Split (#235–#242)

• Publication Boundary: Added .gitattributes with export-ignore for AGENTS.md, index.md, docs/, and .gitea/ so GitHub source archives and git archive no longer ship internal workflow files.
• Settings Status Fallback: Corrected provider/config status handling in the Settings Card so partial/unknown states no longer show a false “unavailable”.
• Design-System Alignment: Renamed residual fal- CSS class prefixes to the ig- system and bound colors to DSH theme variables via var(--dsw-alias-*, <fallback>).
• Sensitive File Hardening: History, cache meta/data, and spend-meter writes now enforce 0600 permissions after write.
• Dead Code Removal & Module Split: Removed unused listCuratedStyles; split oversized server modules — providers.js utils extracted to provider-utils.js, processing.js into processing-basic.js + processing-advanced.js. Client file split is tracked separately (#244).

🚀 Updates v0.10.23: In-App Auto-Updater, Settings Synchronization, Active Probes & Language Purity (#232)

• One-Click In-App Auto-Updater: Direct 1-click update support inside the plugin Settings Card (UpdaterSection) backed by /api/dsh-image-gen/update. Fetches the npm registry for release manifests, verifies semver differences, and securely triggers dsh plugin add @goodandready/dsh-image-gen@latest restricted to loopback and private LAN connections.
• 1:1 Settings Synchronization: Fully synchronized host Config schema in lib/index.js with client UI fields (lib/client.js), exposing autoEnhancePrompt and defaultStylePreset under the ✨ Enhancer tab.
• Active Diagnostic Probes: Added real HTTP network probes in testProviderConnection for Replicate (/v1/models), Google Gemini (/v1beta/models), and ByteDance Seedream with timeout protection and live roundtrip latency tracking.
• Strict Multi-Language Compliance: Pure standard en and zh localization bundles embedded in core package; modularized Russian language support via goodandready/dsh-russian-lang per DSH plugin guidelines. Exactly 0 Cyrillic characters in product code (lib/).
• WAI-ARIA Accessibility Hardening: Enhanced tab navigation and input form validation with role="tablist", role="tab", aria-selected, aria-controls, role="tabpanel", aria-describedby, and role="alert".

🚀 Updates v0.10.22: Referential Stability & React Error #185 Infinite Loop Fix (#230)

• Settings Card Referential Stability: Resolved React Error #185 (Maximum update depth exceeded) in FalSettingsCardController and CardForm.prototype.bind. Store snapshots are referentially cached during render cycles (Object.is(prev, next) === true), completely preventing infinite re-render loops in React 18 / useSyncExternalStore.
• Deep DSH Store Integration: Added seamless runtime integration with @deepseek-ai/dsh-client-store (runtime.createSnapshotStore) paired with a robust standalone snapshot caching fallback.
• Automated Regression Test Suite: Added dedicated referential identity test in test/client-syntax.test.mjs verifying snapshot immutability across repeated reads, single-notification publish triggers, and clean listener lifecycle.

🚀 Updates v0.10.21: Variations Workbench, Smart Aspect Ratio Crop & Brand Asset Pack (#228)

• Variations & Style Remix Workbench: Interactive visual drawer embedded directly in FalImageCard and Gallery. Fine-tune variations with a continuous creativity / denoising strength slider (0.05 to 0.95), preset quick buttons ("Subtle 0.25", "Creative 0.65"), and prompt modifier guidance.
• Intelligent Aspect-Ratio Canvas Cropper & Resizer (smart_crop_image): Instant lossless aspect ratio framing for social and responsive surfaces (1:1, 16:9, 9:16, 4:3, 3:2, 2:3) supporting focal heuristics (auto_focus, center, rule_of_thirds, letterbox) via zero-dependency pure Node.js SVG vector raster wrapper.
• Project Asset Pack & Social Card Exporter (export_asset_pack): Production-ready automated brand asset generation producing SVG favicons, PWA application icon suite (icon-192.svg, icon-512.svg), manifest.webmanifest, high-resolution OpenGraph social banner preview (og-card.svg at 1200×630), and an asset manifest catalog (catalog.json).
• Dedicated Toolviews for 12 Visual Tools: Direct interactive action buttons and visual renderers in conversation sessions for all generation, editing, inpainting, remix, crop, export, and collage tools.
• Strict Localization Standard: Complete zh and en UI dictionary integration; Russian locale registered via goodandready/dsh-russian-lang.

🚀 Updates v0.10.19: Sidebar Gallery, Diagnostics & Style Engine (#224)

• Native Sidebar Gallery & History Drawer: Integrated directly into DSH's native right sidebar pane (sidebarRightTabs and sidebar.right.pane.tab), betterSidebar, and a quick-access utility chip in the conversation header (conversation.session.header.utilities). Browse past generations, inspect metadata, copy prompts, and export links without cluttering the chat.
• Interactive Provider Diagnostics: Real-time "Test Connection" button in the Settings Card under the Providers tab. Ping Fal.ai, ComfyUI, Automatic1111, or Custom OpenAI-compatible endpoints with live roundtrip latency tracking and status badges (Ready, High Latency, Unreachable).
• Curated Style Presets & Smart Prompt Polisher: Built-in artistic engine with 10 curated styles (cinematic, photorealistic, anime, minimalist_vector, isometric_3d, analog_film, cyberpunk, pixel_art, oil_painting, claymation), optional autoEnhancePrompt setting, and style_preset tool parameter.
• Collage & Comparison Grid Assembler (assemble_image_grid): Stitch 2 to 4 images into clean side-by-side, 2x2 grid, or vertical collage comparison graphics via pure Node.js SVG raster rendering, zero heavy external binaries (< 250 KiB package size).
• Color Palette-Constrained Generation: Pass palette_colors (hex color array) into generate_image to mathematically bias the prompt and negative prompt toward your exact brand color palette with automated WCAG contrast validation.
• Inpainting & Mask Support in edit_image: Added mask_image (alias for mask) and fine-grained strength (0.0 to 1.0) control for localized inpainting in Fal.ai and custom gateways.
• Full Chinese & English UI Dictionaries: Complete zh and en localization coverage in Web UI, with Russian translation registered via goodandready/dsh-russian-lang.

🚀 Updates v0.10.18: Speed Acceleration & Quality Hardening (#222)

• Parallel Batch & Pack Generation: Multi-variation requests (count > 1, prompts array) and generate_image_pack multi-ratio workflows now execute concurrently with a concurrency limit (concurrency: 3) via asyncPool, reducing generation wait times by up to 3x.
• Zero-Delay Initial Polling: Eliminated artificial initial delay in pollStatus and queue runners (Fal.ai, ComfyUI), inspecting generation status immediately on first attempt and shaving 1–1.5s off fast generative workflows.
• Sub-Millisecond L1 In-Memory Cache: Built-in 32-entry in-memory LRU cache atop disk cache L2 provides instantaneous (< 0.1 ms) cache hits without synchronous disk I/O.
• Fast-Fail Quota Detection: Added classification for HTTP 402 (Payment Required) and exhausted account quota/credits in isFatalClientError, enabling immediate, clean fallback transitions without fruitless retry loops.
• Expanded Test Suite: Added test/batch5-speed-quality.test.mjs, bringing total test coverage to 136 automated unit tests (100% pass).

🚀 Updates v0.10.17: Modular Tool Lifecycle (#216, #217)

• Tool modules extracted from apply(): host lifecycle in lib/index.js is now a thin cordis entry (~650 lines). Tool definitions live in lib/tools/{generation,processing,editing,inspect,frontend}.js behind lib/register-tools.js.
• Per-tool labeled ctx.effect: each of the 15 tools registers in its own effect (dsh-image-gen: tool <name>) for clean unload/reload disposal.
• Project meta: AGENTS.md and index.md document architecture, constraints, and the test matrix (internal workflow files — not shipped in the npm package).
• Design contract: docs/design/DESIGN.md no longer advertises the removed HistoryGallery UI (#203).
• Regression lock: test/lifecycle-structure.test.mjs asserts modular layout, labeled effects, and meta files. Suite: 132 unit tests.

⚡ Overview

@goodandready/dsh-image-gen is a premier graphic generation and visual processing suite for DeepSeek Harness. It equips autonomous agents with an extensible set of tools for image generation, transformation, background removal, upscaling, vectorization, multi-reference blending, and quality inspection across 8 generative backends.

🛡️ Reliability, Performance & Quality (v0.10.0)

• Exponential Backoff with Jitter: Adaptive polling for FAL, Replicate, and ComfyUI queues protects against HTTP 429 rate limits.
• Error Classification in Fallback Cascade: Client-side errors (Content Policy, 400 Bad Request, NSFW) fail fast without wasting API credits on other providers.
• Deterministic Hash Caching: Exact matches of prompt, model, and seed return instantly from local storage with zero API expense.
• ComfyUI & Automatic1111 Drag-and-Drop: Metadata is packed into PNG Parameters chunks in standard format.
• Dimension Snapping: Automatic normalization to multiples of 64 guarantees VAE bucket compatibility.
• Enhanced Style Presets: Built-in styles include tailor-made negative prompts and optimal guidance scale settings.

🛠️ Complete Tools Reference

• generate_seamless_texture (#468): Production-ready seamless repeating textures and materials for 3D surfaces, games, and web patterns with toroidal wrapping and 3×3 inspection grid.
• reverse_prompt_and_recreate (#465): Deconstruct visual aesthetics, lighting, optics, medium, and palette mood of any image into a structured reverse-engineered prompt, with optional instant style recreation.
• restore_face_and_details (#467): Localized face, eyes, and high-frequency detail restoration (Hi-Res detail fix) with automatic zone targeting and seamless feathered edge alpha blending.
• generate_with_control (#463): Structural conditioning and geometry-guided generation using reference input controls (mode: "canny" | "depth" | "pose" | "sketch"). Provides edge feature extraction, depth gradients, and pose bounding box normalization.
• generate_turnaround_sheet (#464): Coherent multi-angle turnaround model sheets for 3D asset modeling and concept sheets (front, side, back, three_quarter), with automated Sharp slicing into individual camera angle assets and JSON manifest.
• outpaint_image (#459): Intelligent canvas expansion across directional borders (top, bottom, left, right) with Sharp-powered transparent compositing, automated SVG outpaint mask generation, and seamless background scenery continuation.
• async_generate_image (#460): Asynchronous generation pipeline with immediate task_id dispatch (wait: false), live progress updates (queued -> processing X% -> completed), and configurable exponential backoff polling guard.
• translate_image_text (#454): Translate in-image typography into Russian, English, or Chinese with grounding/OCR text detection, automated background inpainting mask generation to cleanly erase source text, and typography re-rendering with matching coordinates, color, and font metrics.
• render_wireframe_asset (#455): Transform rough wireframes, whiteboard sketches, or UI mockups into high-fidelity design assets using curated design system presets (modern_saas, dark_glassmorphism, brutalist, apple_minimal) and calibrated layout preservation fidelity.
• generate_drawio_diagram (#451): Generate editable Draw.io / diagrams.net (.drawio / mxfile XML) architectural schemes and workflows with clean standalone SVG vector preview. Supports 5 aesthetic themes (light, dark, blueprint, corporate, nord), 10 node shapes (rounded, rectangle, ellipse, diamond, cylinder, cloud, actor, hexagon, parallelogram, step), connector routing (orthogonal, straight, curved, dashed, bidirectional), and automatic topological layout (horizontal, vertical, grid, tree). Includes clipboard snippets for Figma and Penpot.
• generate_image: Generate images with pluggable providers, reproducible seeds, aspect ratios, character & subject consistency binding (reference_image, reference_strength: 0.1–1.0 with FLUX Redux, Seedream, Midjourney --cref, Replicate), safe multi-turn context compaction guard (#456), curated style presets (photorealistic, anime, isometric_3d, pixel_art, cinematic, minimalist_vector, claymation, cyberpunk, analog_film, oil_painting), negative prompt filtering with automated natural-language fallback adapter for non-negative models (DALL-E, FLUX), and precision inference tuning (steps: 1–150, guidance_scale: 1–30, sampler_name: euler, dpmpp_2m, etc.)., reproducible seeds, aspect ratios, curated style presets (photorealistic, anime, isometric_3d, pixel_art, cinematic, minimalist_vector, claymation, cyberpunk, analog_film, oil_painting), negative prompt filtering with automated natural-language fallback adapter for non-negative models (DALL-E, FLUX), and precision inference tuning (steps: 1–150, guidance_scale: 1–30, sampler_name: euler, dpmpp_2m, etc.).
• set_style_anchor (#283): Lock session visual identity (subject, outfit, medium, color palette, lighting) for consistent multi-turn generation.
• generate_ui_asset (#284): Layout-aware UI asset generator for icons, stickers, badges, spot graphics, and heroes with negative space constraints (isolated, centered, left_empty, right_empty, top_empty, bottom_empty) and auto-transparency.
• generate_style_matrix (#286): 2x2 visual benchmarking matrix exploring 4 aesthetic presets simultaneously with blind compare mode and 1-click style preset adoption.
• In-Chat Inpainting Canvas (#285): Interactive brush overlay and mask drawer mounted directly over image message cards in chat.
• Smart Provider Fallback Chain (#282): Intelligent cascading failover across providers on 429, 5xx, timeouts, or depleted balance.
• edit_image: Targeted inpainting and modification with automatic session reference resolution (#142, #144, #145).
• vary_image: Controlled variation generation preserving composition (#143, #144).
• remove_background: Extract subject with transparent PNG output (FAL BiRefNet / Rembg).
• upscale_image: 2x / 4x super-resolution with clarity reconstruction.
• vectorize_image: Convert raster graphics to clean scalable SVG vectors with palette quantization.
• blend_images: Multi-reference composition mixing.
• generate_image_pack: Simultaneous multi-aspect ratio rendering with graceful partial recovery.
• generate_responsive_mockups (#173): One shared product prompt rendered as Mobile (9:16), Tablet (3:4) and Desktop (16:9) UI mockups in parallel. Keeps style/palette coherent across viewports, saves mockup-mobile.png / mockup-tablet.png / mockup-desktop.png, and shows a tabbed viewport preview in chat.
• compare_images: Pixel-level visual difference ratio comparison.
• inspect_image_quality: Automated visual audit, Laplacian sharpness scoring, and defect detection.
• extract_design_tokens: Extract CSS Variables, Tailwind color palettes, and W3C Design Tokens from concept art (#172).
• image_to_css_gradient: Generate lightweight pure CSS Mesh / Radial / Linear gradients (< 1KB) from image colors (#174).
• check_image_contrast: Evaluate background luminance and WCAG 2.1 AA/AAA contrast for text with scrim suggestions (#175).
• optimize_vector_svg: Clean and sanitize SVG, normalize viewBox, and export ready-to-use React TSX components (#176).
• generate_pwa_icon_suite: Generate full PWA icon sets, HTML meta tags, and web app manifest.json (#190).

🚀 Updates in v0.10.4: Cordis Lifecycle, Full Settings GUI, and i18n

• Cordis Lifecycle (#136): wrapped all 7 tool registrations in ctx.effect for proper disposal on reload.
• Settings GUI Completeness (#137): exposed fields for Replicate, SeaDream, Gemini, Local ComfyUI/A1111, style presets, and LLM enhancer.
• Package Manifest (#138): declared kernel peerDependencies (host-webserver, settings, llm, system-prompt).
• React Cleanup (#139): removed dead state hooks from FalImageCard.
• Complete Localization (#140): eliminated hardcoded strings, wiring comprehensive dictionaries for en, ru, and zh.

🚀 What's New in v0.10.7 (#197)

• Robust Error Formatting: completely prevents [object Object] from appearing in provider refusal chains, extracting deep .message, .detail, and .error objects cleanly.
• Deduplicated Provider Prefixes: eliminates redundant codex: codex: ... prefixes.
• FAL Credential Aliasing: seamless fallback between FAL_API_KEY and FAL_KEY in credentials and environment.
• Subscription Aspect Ratio Mapping: maps aspect ratios (16:9, 3:2, 9:16, 2:3) to appropriate subscription dimensions (1536x1024 / 1024x1536) instead of falling back to default square 1024x1024.

🚀 What's New in v0.10.16

• Safe Attachment Service Fallback (#214): Added graceful fallback handling in saveAttachmentSafe across all 8 visual tools (generate_image, variations, remove_background, upscale_image, blend_images, etc.). When running in headless CLI mode or when the attachment store is unavailable, outputs are safely written to disk with full file paths and data references rather than crashing tool execution.
• HTTP Image Endpoint Strict Validation: Hardened /dsh-image-gen/image route against malformed or NaN parameters (b, w, h), cleanly responding with HTTP 400 or 404 without leaking internal system traces.
• ComfyUI Node Error Extraction: Integrated extractComfyNodeErrors to parse node execution errors from /history/{pid} status responses, immediately reporting root-cause node diagnostics rather than timing out.
• Custom Provider Error Normalization: Standardized gateway error extracts through formatErrorMessage, eliminating raw JSON or [object Object] artifacts on 4xx/5xx API responses.
• Cache & History Consistency: Ensured content-addressed disk cache hits synchronize seamlessly with generation history and sidecar metadata.
• Test Suite Expansion: Added test/batch4-hardening.test.mjs, expanding test coverage to 128 automated unit tests (100% pass).

🚀 What's New in v0.11.12

• Character Sheet Generator (generate_character_sheet, #181): Synthesizes consistent character turnaround and model sheets (1x3, 2x2, emotions) preserving facial features and attire across anime, 3D, concept, and comic styles.
• FaceID & Portrait Consistency (face_reference, #183): FaceID / IP-Adapter prompt directives and face anchor mode in set_style_anchor for persistent facial likeness across scenes.
• OCR Localization & Text Replacement (replace_image_text, #180): Automated OCR text detection via dsh-vision-bridge, seamless background inpainting, and crisp typography replacement at original coordinates.
• 3D Isometric Diagram Beautifier (beautify_diagram, #185): Converts raw Mermaid/Graphviz architecture diagrams into stunning 3D isometric tech illustrations for documentation and hero headers.
• Interactive Inpainting Canvas (#328): In-chat masking overlay with aspect ratio auto-detection, adjustable brush/eraser, and direct prompt dispatch.
• Live Progress Stream (#329): Real-time progress bar, stage indicators, and denoising step counters in FalImageCard.

🚀 What's New in v0.11.9

• ComfyUI Local Backend Payload Fix (#322, GitHub #7): Eliminated redundant nesting in lib/providers/backends/local.js that wrapped workflows as { prompt: { prompt: workflowGraph } }, resolving missing_node_type: Node 'ID #prompt' has no class_type HTTP 400 errors during local ComfyUI generations. Added node shape validation before submission.

🚀 What's New in v0.11.8

• Bounded Config Payloads (#313): PUT /dsh-image-gen/config now uses bounded request streaming (readBoundedRequestBody) with a 64 KB cap, returning HTTP 413 Payload Too Large on oversized bodies to prevent memory exhaustion DoS.
• Build Parity Gate (#316): scripts/build-client.mjs supports --check mode, enforcing client distribution parity in npm test.
• Architecture Decomposition (#317): lib/index.js simplified into a lightweight facade (<400 lines) with dedicated lib/config-schema.js and lib/resolve-source.js.
• Runtime & Permissions Polish (#318, #319): Idempotent startup permissions repair and removal of legacy loc.get fallback in favor of standard Cordis translation runtime.

🚀 What's New in v0.10.15

• Loop Guard Zero-Limit Bypass (#212): Fixed an edge case where setting loopGuardLimit: 0 (configured to disable protection) enforced a limit of 1 due to Math.max(1, limit). Setting limit to 0 now properly bypasses loop checks.
• Security Hardening (Token Masking): Added automatic pattern masking for Replicate API tokens (r8_...) and Google Gemini API keys (AIza...) in sanitizeErrorAndLogs.
• Cache Resilience: Isolated LRU touch updates in getCachedGeneration so that metadata write contention does not discard valid image bytes on cache hits.
• Defensive File Safety: Added explicit file existence, empty file (0 bytes), and 50 MB maximum size cap checks in resolveConversationImage preventing OOM crashes on huge files.
• Vectorize Image Attachment & Toolview Preview: vectorize_image now registers the SVG in ctx.attachments and provides url, enabling interactive preview in tool.call.toolview.
• SVG Markup Validation: Added strict validation in optimizeSvgContent rejecting non-SVG strings with descriptive errors.
• Cost Meter Safety: Hardened assertBudgetAvailable to handle string/undefined/NaN values safely.
• Expanded Test Suite: Added test/batch3-quality.test.mjs expanding suite to 126 automated tests (100% pass).

🚀 What's New in v0.10.14

• dsh-clinebot Unified Visual Overhaul (#210): Redesigned client settings card following the high-end dsh-clinebot unified design system. Added top quick stats row (.ig-grid-4, .ig-stat-box) showing active provider, default specs, safety/loop guard, and daily budget/cache status. Integrated status badges (.ig-badge-ok/warn/bad).
• 5 Categorized Settings Tabs: Settings fields organized into intuitive tabs: ⚙️ General, 🔌 Provider, ✨ Prompt & Styles, 🛡️ Safety & Budget, ⚡ Cache & Storage.
• Client ErrorBoundary Protection: Wrapped all settings forms and toolviews in an ErrorBoundary with retry capability, preventing any component render crash from affecting DSH core UI.
• Full Host Config ↔ Client Fields Synchronization: Synchronized all 40 config properties between Config schema in lib/index.js, staged FIELDS in lib/client.js, and localization dictionaries (en/ru). Exposes controls: qualityGate, dailyBudgetUsd, loopGuardLimit, diskCache, subscriptionQuality, cacheBySeed, cacheByPrompt.
• Complete Toolview Registration: Registered tool.call.toolview for all 8 visual tools (generate_image, edit_image, vary_image, blend_images, generate_image_pack, remove_background, upscale_image, vectorize_image).
• Safety, Budget & Loop Guard Hardening: Extended trackAndAssertLoopGuard, assertBudgetAvailable, and sanitizeErrorAndLogs error masking across edit_image, vary_image, blend_images, remove_background, and upscale_image. Added seedreamBaseURL support.

🚀 What's New in v0.12.10 (#480, #481, #482, #483)

• Route Reliability & WebServer Hardening (#480): Resolved empty 400 Bad Request responses on REST endpoints caused by Cordis context proxy evaluation of uninjected properties. Introduced safeJsonHandler and getConnection wrappers across all registered routes for structured JSON error reporting.
• Interactive Approval Gate Hardening (#481): Eliminated model self-bypass of requireApproval. Removed approved parameter from tool schema, sanitized non-interactive error directives, and blocked bypass via approved: true or force: true.
• Strict Write Origin & CSRF Defense (#482): Enforced mandatory Origin / Referer validation matching Host for all mutating endpoints (POST, PUT, DELETE), preventing reverse proxy bypass via loopback tunnels (e.g., dsh-lanmode).
• Test Isolation & Hygiene (#483): Replaced fixed test artifact paths with workspace-confined temporary directories to prevent race conditions during parallel test runs, added release candidate archive guards, and pruned unused exports.

🚀 What's New in v0.10.13

• Plugin Settings Location (#208): Moved settings card exclusively into the standard Settings → Plugins → Plugin settings section (settings.plugin.item slot). Removed the legacy fallback to settings.section that previously caused duplicate entries in the top-level sidebar navigation.
• Deferred Slot Injection (registerSlotWhenReady): Implemented robust deferred injection via ctx.slots.inject ensuring the settings card safely mounts when the parent settings container is rendered, eliminating timing collisions at startup.

🚀 What's New in v0.10.12

• Fix Syntax Error (#208): Resolved variable redeclaration collision (const hPrompt) in checkCache within lib/index.js which could prevent plugin initialization on strict Node.js runtimes. Added automated syntax check across all source modules to test suite.

🚀 What's New in v0.10.11 (#165, #166, #167, #168, #169, #170)

• Negative Prompt Sanitizer (#165): Automatic defect filtering and deduplication for diffusion models (SDXL, ComfyUI, Seedream, Local) with style-conflict protection (preserves intentional grainy, vintage, or dark aesthetics).
• Automated Quality Gate & Silent Re-roll (#166): Heuristic variance and sharpness inspection combined with dsh-vision-bridge hook; performs silent re-rolls (up to 2 attempts) for blank, corrupted, or solid frames before returning results.
• Cost Metering & Daily Budget (#167): Full rate card pricing per provider and resolution, spend tracking in ~/.dsh/storages/dsh-image-gen-spend.json, dispatch to dsh-cost-meter, and hard daily budget enforcement via dailyBudgetUsd.
• Fail-Fast Loop Guard (#168): Session-scoped circuit breaker prevents runaway agent retry loops (default max 3 consecutive generations without user interaction).
• Secure Credential Masking (#169): Comprehensive masking of tokens in logs, URLs, and errors (Bearer sk-...abcd), with 0600 file permission enforcement.
• Content-Addressed Disk Cache (#170): Instant retrieval (<50ms, zero API cost) for identical requests by SHA-256 hash, with automated LRU disk eviction (500 MB limit) and force: true bypass.

🚀 What's New in v0.10.10 (#201, #203)

• Settings GUI Stabilization (#201): Fixed booleanField spec in client runtime that prevented the settings configuration pane from rendering in DSH Web UI. All configuration fields (providers, model identifiers, API credentials, style presets, LLM enhancer, timeouts, cache retention) render cleanly.
• Streamlined Settings UI (#203): Removed the bulky in-settings history gallery to keep the configuration panel focused, fast, and organized.
• Comprehensive Localization (#201): Added 100% dictionary coverage for all provider credentials, endpoints, and field hints in English and Russian.
• Robust Slot Mounting: Implemented registerFirst helper with graceful fallback between settings.plugin.item and settings.section.

🎨 Supported Generation Backends

• fal (Default): FAL.ai queue for FLUX.1, SDXL, Clarity Upscaler, and BiRefNet.
• replicate: FLUX and SDXL models via Replicate API.
• custom: OpenAI-compatible endpoint (DALL-E 3, SiliconFlow, Together AI, local gateways).
• codex: ChatGPT Plus/Pro subscription generation via dsh-subscriptions (OAuth).
• grok: Grok Imagine subscription generation via dsh-subscriptions (OAuth).
• local: Local ComfyUI workflow execution or Automatic1111 web API.
• seedream: ByteDance SeaDream generative API.
• gemini: Google Imagen 3 via GenAI API.

[!NOTE] SSRF Protection & Base URLs: By default, provider endpoints (baseURL, customBaseURL, seedreamBaseURL, localBaseURL) are validated against an allowlist of official provider domains and loopback/LAN addresses. To configure custom reverse proxies or third-party gateways, enable Allow Custom Base URLs (allowCustomBaseUrl: true) in the Provider settings tab.

📦 Quick Installation

dsh plugin --profile web add @goodandready/dsh-image-gen

📄 License

MIT © GooDAnDReaDY